The ecayTrade Leak: 35,691 MD5 Passwords Exposed. Yours Might Be One.

HEROIC analysts identified 35,691 exposed records tied to an ecayTrade data breach dated August 27, 2015. ecayTrade is a UK based online trading and classifieds platform. The exposed dataset includes email addresses and passwords hashed with MD5, along with hash type information for each record.

The ecayTrade Leak: 35,691 MD5 Passwords Exposed. Yours Might Be One.

MD5 is a hashing algorithm that was once common but is now considered weak by modern security standards. Unlike stronger hashing methods used today, MD5 hashes can be cracked relatively quickly using widely available tools and computing power, especially for passwords that are short or commonly used. That means a large share of the 35,691 password hashes in this leak are realistically recoverable by anyone motivated enough to run them through a cracking tool.

What Was Exposed

• Email addresses
• Passwords hashed with MD5
• Hash type metadata

Why This Matters

Once an MD5 password hash is cracked, it becomes a plain, usable password just like one stolen in plaintext. Attackers run cracked email and password combinations through automated credential stuffing tools that test the same login across banking sites, email providers, and other online accounts. If anyone among the 35,691 affected users reused their ecayTrade password elsewhere, that reuse is the direct path to account takeover, financial fraud, or broader identity theft.

How a Database Breach Exposes Weakly Hashed Passwords

This incident is classified as a database breach, meaning attackers obtained the data directly from ecayTrade's stored records rather than through malware on individual devices. These breaches commonly happen when attackers exploit a vulnerability in a platform's backend, gain access using stolen administrator credentials, or find a server that was left insufficiently secured. Using MD5 to hash passwords, as seen here, was a common practice years ago but has since been recognized as inadequate protection, since modern hardware can crack large numbers of MD5 hashes quickly.

Check If You Are Affected

If you have ever had an ecayTrade account, it is worth checking whether your information appears in this breach. HEROIC's free breach scanner searches more than 400 billion leaked records to show you exactly where your email address and passwords have surfaced. Run a free scan today and update any passwords you may have reused across other accounts.